Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 02:52

General

  • Target

    72538450866b57444207c465e0c4ae99_JaffaCakes118.html

  • Size

    84KB

  • MD5

    72538450866b57444207c465e0c4ae99

  • SHA1

    9555c152cc1a28e9bce9b3c30ce4718045321fd1

  • SHA256

    2971386ff74abe2bf2693b9fe3e8b16eb3f0b43359284df778e95efeaffbe393

  • SHA512

    2d06d8fffbf5c897f982a6df703038d6ecd7843b8d0f18ab50b1fa44e6adeb623a183de078a01dcb82c196c27eb3d5ee6d6bfc8d3b05aac7de7fad9b54b85c92

  • SSDEEP

    1536:itBHv7ynv+jr4o16H/m4upnJa05fafzrs:6BHTG+jso1f4ubawafzrs

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\72538450866b57444207c465e0c4ae99_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2852
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2852 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    9245b00df58cc437b032ef85fede1e9e

    SHA1

    4e2c28ef76abd5ec3098c1abbaa90135fcd7d3d1

    SHA256

    e853551bc4f82a25060acb837a3b59a5e113cd1e3a6ba8e06ace749582f7e3ad

    SHA512

    84be4f4b0e97adb2169f8adb5b1953dcb3702cf5ecdd09c4a831e121bb518fd374b9602be1b897c1f909277564a60ba58509e9f5a1f7ae7341fd7c98832a22ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dce060723d3efa95e86697d90dbcaa49

    SHA1

    2e18e9fb2798ddc215b19df55f4e8269af3c731a

    SHA256

    c96086802d90c67af227de0bc99da25070fe1bf9a27f1d82425cb6d38bff9a6b

    SHA512

    722e58883be2de8da89ae38a4bf5e368f2bf002d789e4a73c05c7ca56640112d08445819017d88889a7282c5331d2077f6a67ee52ce8309940ef9d11352bcd24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9110d347e89bb647a5f40ed85981307c

    SHA1

    ecb0222f729dad22dfb5acf8d04058850d4f5d86

    SHA256

    b266249aaa87851241766a625c22b7218f92d53297add493be631a9284a76076

    SHA512

    cd5b51e6d3bfa2d42e637494e53fb367b9c847000c88dec432dc487c3fcb4cfa176d097fd086ea5bc547f50d5036ecf9430ec9ab8accaa9b820f438cc9921705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f007ef34620a7037e0c36e851b58832d

    SHA1

    45ee6ffb49c7acbbe7def89b89d80fbafb03a05f

    SHA256

    40950adebc859f5efa546af30dcbd10a48f2f755538da33268504dfb9f778c18

    SHA512

    74c12fbe3680697c99b5e12ecd2ea6ebe7f903f1f92ba47f37bf10c915c2f9e14113cb58465ee43cde2260120644bcc06ad25a00cf20800330fc8111e1dd77a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87213f23e208821ba91c7d1a66c5ce4e

    SHA1

    5a23e588de1ebd1d621a4d14277187beb69e1458

    SHA256

    d5fc90bbbf73403d1625980d6cc0f7b18d9a16671a43da762c49e0b05f0878e7

    SHA512

    8362156a5f1b10d88050307994d5b889f700002588b811b54267b158fd109b0a9b93f60edf821e7a67d18f34fd2e5b44eb52e50f09cf459d42ebe2d3e5017313

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24d86b4f2009a55439552a076dfe1971

    SHA1

    67c0bdf93fe599a4766e253af0719ec20f6a5d7a

    SHA256

    a4e8e67ed6a6d921e1ffc12852de2cd85e8beb3ccdfe5f2e52a2104f1f6baeaf

    SHA512

    2d0b313fc04ce10c17f9d1f196f723b67df019f206ed246b9361170e16c17480b915e785e9039eaa80569c367e5690c081ef1e90fcc13dc98e192b1868770354

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55deaef6621e3c9a49f7d94dc5476fde

    SHA1

    3c92be60b0a331cf3d35e6440eb6ccfb4365f74a

    SHA256

    0102e62cbcbefa21238f122e0e8e1580f59972d83fec6f1cbbaedbf50d973b00

    SHA512

    e6e6b2faa628b4a7dd840c1be8ad3b2f19ff785d9a252a6c55f8a188425f375a0b11bd277e280f634d74d535d605257e6837d0f59d4da8ffa92689073609b07f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18c20284c06d9800670d2ee8fc04ec1f

    SHA1

    2343568d4e4b19501ab3ae1ee06ae5a9469af41b

    SHA256

    a3988d6e81c4e6fe35c1c66b93a24c8f3e5d6b4f83ef112060f9e89a7a3aeb55

    SHA512

    62423e5530a5895b9ad1d8ee74a20752d23bf30c0a9d6b5e4119d12fed902241337e852a4572bd6ced0a37bf02deab77f19a5bb684eddcb301e9dd041f7ba19e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1725fc9bce34d471764b937f76ee1c3d

    SHA1

    deee7850c708d3ffc6475c93547542278edfe884

    SHA256

    fe13b00088de6c332cb289f0374fad7fbb23c6950fda87f54370738d19f58bfe

    SHA512

    b1104fbcd668079ff010db5878e3778c74ff243432cf73afc480370fbb1121ab95b19ef91d345661e1eb57d17735b37374eacc88a151ec99473483eadb54eb4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7a02c5d320b363f14fffe536e3cbafa

    SHA1

    6d7fdf2c2d9a262c88c97fb3788857d937b32436

    SHA256

    3ed89e21bdfac428bd3ff05c0fea4c3448016d574f70b6de18585e8243a8d2d2

    SHA512

    1bdbc1c7a6776e8da0084e531b9c7d3693ea86b5248219223ca6e7403be70e37ab4126b93922f820ba534bf0a584d8be3aef2e287455a0197bd66f9f41e61563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3605fc91d4b160d9b090dfb3787a90cf

    SHA1

    50b23ebfed91a46f352ba19ca3414f7673535d35

    SHA256

    0059f9a8c462f784a7f0940eb1d67d527ad9f40712c270517ad385b6ec6226d6

    SHA512

    9acb0751a69010f20ad6b7227ead6591959a9dd5b52757f9af492d8c42e8e60be469364ae69c48d9db215c3d6ca0fb82990f937f796b64d93b310c26525b2a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb209ab015db3fca67b5f57b1a8c8b5c

    SHA1

    da9f3e705288c412b1f7ce01ffd11d8a2cac753c

    SHA256

    f6465ce4344d46c4438058cfb515a2b5e9a5505cc900633b80b2cf837faa0ab2

    SHA512

    c749368fd9f37fd98c27ea3a66ef3fb58dfc24d77349825900fd8a25f48c3d04a02f59302219b70b915806609c8f06cf78f7546516c91c7723cc90c0cf7eb27a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    854495f8d359912882db269af011aea2

    SHA1

    f47b778b01759ee530a9a655b3a2cab1d2f889e3

    SHA256

    2bb02dc32921c41f9af2b23cb03dc8eb0475ea4ad6d2602a106d43daec735627

    SHA512

    96b82ebfbb3034ab438efd6db30dfd7c6e9887486853a8b4a30d6a196720e6eaec63fe2c3408caff7ee0909153a35af6eb8ee4502dc0fbf7976a13ba02b62c52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b53ef03c5fad0536741d2d4285f7e72

    SHA1

    646a9c50fc1bff8cdf4799b30e3727e6a89985fd

    SHA256

    8210661cbf13fd07de36130201ed507735186cd0469d98188184b104129c05ec

    SHA512

    fe01ec207e29fa1dbb3470cdf7cc862180f012b9d54eba6e893754ce9dd3567c03db6029ed0542d87814d23d0c466a8047916304bc46bfbdf37ad62081c0cc6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23582acd1aa981df5a31543d02733c9f

    SHA1

    afdb5452d9d6c98c74987fa7641659d07b97fef6

    SHA256

    e243ecf027abc2157833a71717eb8dd19c2049da9c79c7dadf06fee91420b041

    SHA512

    9d8346a1db0d8aeeabdd9855f36f619171aeaaa48a6f6bb747a9c09cba5d91befae223532c2bfaecf9c685fcffec57c9516733edbbf1eef1edc2681be63c0a5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    372148900d875ce49b72b8cff78a8cae

    SHA1

    915a00382b07c0d614ddbefa32b87570cf25ccec

    SHA256

    9b3caca68a43630b8993803b3bafa707bec4ad632d412e15502d73808e7abecd

    SHA512

    c3a611efae62eba6f076406c81edabd7cb6ef4b017d91f1c89415dc7e704b8577fca85a81f3e4e35f03e7265d067235ee2ef84f3dc8e27166b039582b2933976

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0dd42354610f02a6148b16dd538b2783

    SHA1

    61c831ca73ae38c209ce1e2c360fbd5f03028fde

    SHA256

    f54ae29aeb2bb8dcb9616d0a0261c3eccd97ceab08c0704fcaf5545ab4b4d581

    SHA512

    2e5053016ac5343249646200890ac3e2c3c40bec9fa1cbba569653bc95c5774b67117e199a8bc7b951d960dc602c5b99686cceb00794602b82fc5205ddae2eea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b60bb468bcb14eb67a574ecb8b5d5a9

    SHA1

    f6d23b82bd889671c123f8712dc8e6426103e50b

    SHA256

    2012f463d9e7496865f86dbe9d244611ebf65f859a5637864fbf284b7fd1f3be

    SHA512

    3e76dabc5b0a16387593435f1b512c215d7eed7aabed1d6d44c73b5bf053b713aeef154c080a6b19aabdb0b5060496cf4cffe460251b3b44b3cfbb00b6b988de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8dec95183843bff764a88d4cfc55f6c

    SHA1

    6d78a597e353c207113562f620f4b3a33b5d3fe0

    SHA256

    11ef624ab2aea443445f8c38fb71a68e746991b113c59b7e32df119f3ad90b59

    SHA512

    19e73b13c43d1b350c004ef011bdb0924d3d2908e31e6fcdfdfc366849c73293b14f848545ffd706bbc72e8cf75e6d7ccc21ce056f2a979446b51372bdef8b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7bec332cace47478d76712db46c1508

    SHA1

    273f5faadcc9cd81619bbacb92b3e54304b6ebcd

    SHA256

    c4756092dbdea162575461c8d57c51533c838810caf4f549d34f04d650b69e78

    SHA512

    0e94660dd2de576d7fadc9a8b66c456c526d255cc769ff6d515290e8ee7d7ace91855bfb0db0d27570c9ce5fdb812df668da64587677d6d06f36c4db7b9f866f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c38497df5a9843c8efd609940b46e92d

    SHA1

    20a079c908c47903b936438877530757b0a91bcf

    SHA256

    f5878139322257d3083bd18d1fac8c4c832b7a213122d074ca8be3e7b97aff80

    SHA512

    4f53575aa8b3cb7e9cfc4cbf855ff8517d9bafc300f3b3c0e2f44ef4134ff20f1fddaf99cda1f8c8ff1586d698470664044a24a2a5895e5669e077363cfb270f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0E1IWGZ4\cb=gapi[3].js

    Filesize

    135KB

    MD5

    cb98a2420cd89f7b7b25807f75543061

    SHA1

    b9bc2a7430debbe52bce03aa3c7916bedfd12e44

    SHA256

    bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

    SHA512

    49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WHDSWW5V\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    881eb3704191d887333d08190e37b9c3

    SHA1

    fb5f7a2259c6e2d0a986f1df7da0017f6f4bc198

    SHA256

    03759f99c9adbff1efc85f512a97546207efcf91894a08b131bf59c2e2b95206

    SHA512

    860ce2d7e2ee0a1eea2701af9d0e01659508e26bcbd2b4456bc926fbada737a067fb5281085c00d136f6294964cc2a6764ce2c12cf3fd32a0f130c117a6e3191

  • C:\Users\Admin\AppData\Local\Temp\Cab69DC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar69FE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b